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(57)Abstract: 

PROBLEM TO BE SOLVED: To reduce the load on a device 
manager and to change a cryptographic key without interrupting 
communication by permitting a first communication equipment to 
select an identifier from a cryptographic key table, informing a 
second communication equipment of it, permitting the second 
communication equipment to take out the key corresponding to the 
identifier from the cryptographic key table. 
SOLUTION: The cryptographic key tables where the plural 
cryptographic keys are registered for respective opposite parties 
executing cryptographic communication are set in the respective 
communication equipments 1-3. The cryptographic key tables Tab 
and Tac for executing cryptographic communication with the 
communication equipments 2 and 3 are provided for the 
communication equipment 1. The cryptographic tables Tab and Tac 
for executing cryptographic communication with the 
communication equipment 1 are set in the communication 
equipments 2 and 3. For using the key of ID=5 in the cryptographic 
communication between the communication equipment 1 and the 
communication equipment 2, ID=5 is set as an initial value. In the 

respective equipments, one cryptographic key is taken out from the cryptographic key table based on ID 
and it is used for the ciphering of data to be transmitted and the decoding of received data so as to 
execute cryptographic communication. 
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* NOTICES * 

JPO and NCIPI are not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect the original precisely. 

2. **** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim 1] It is the updating approach of a cryptographic key used in case two or more communication 
devices are connected in a network and cryptocommunication is performed among said two or more 
communication devices. The cryptographic key table which consisted of identifiers which specify two or 
more cryptographic key and each cryptographic key in the communication device which performs said 
cryptocommunication is created. The 1st communication device of said communication devices which 
perform cryptocommunication chooses the identifier from said cryptographic key table. The renewal 
approach of a cryptographic key characterized by said 2nd communication device with which the identifier 
was notified to the 2nd communication device of the communication devices which perform said 
cryptocommunication, and said the 1st communication device and identifier were notified taking out the 
cryptographic key corresponding to an identifier from said cryptographic key table. 
[Claim 2] It is the updating approach of a cryptographic key used in case two or more communication 
devices are connected in a network and cryptocommunication is performed among said two or more 
communication devices. The communication device which performs said cryptocommunication holds the 
same master key, respectively, and the 1st communication device of said communication devices which 
perform cryptocommunication generates a hash key. It is the renewal approach of a cryptographic key 
about it being characterized by considering as the cryptographic key which updated the result to which 
said hash key was notified to the 2nd communication device of the communication devices which perform 
said cryptocommunication, and said the 1st communication device and said 2nd communication device 
hashed said master key with said hash key. 

[Claim 3] It is the updating approach of a cryptographic key used in case two or more communication 
devices are connected in a network and cryptocommunication is performed among said two or more 
communication devices. The cryptographic key master table which consisted of identifiers which specify 
two or more cryptographic key and each cryptographic key in the communication device which performs 
said cryptocommunication is created. The 1st communication device of the communication devices which 
perform said cryptocommunication chooses one identifier from said cryptographic key master table. The 
identifier is notified to the 2nd communication device of the communication devices which perform said 
cryptocommunication. Said 1 st communication device which performs cryptocommunication generates a 
hash key, and notifies the generated hash key to said 2nd communication device. The renewal approach of 
a cryptographic key characterized by considering as the cryptographic key which updated the result to 
which said the 1st communication device and said 2nd communication device took out the cryptographic 
key corresponding to said selected identifier from said cryptographic key master table, and hashed said 
cryptographic key with said hash key. 

[Claim 4] It is the storage which records the program which updates the cryptographic key used in case 
cryptocommunication is performed among two or more communication devices connected in the network. 
Said program The step which creates the cryptographic key table which records correspondence with the 
identifier for specifying two or more cryptographic key and each cryptographic key in the communication 
device which performs cryptocommunication, The step which chooses the identifier corresponding to one 
cryptographic key in said two or more cryptographic keys, and this cryptographic key from said code table 
in case the communication device which performs cryptocommunication transmits data, The storage 
characterized by consisting of a step which notifies said selected identifier to the communication device of 
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a data transmission place, and a step which takes out the cryptographic key to which this identifier 
corresponds from said cryptographic key table according to reception of said identifier notified by 
cryptocommunication from other communication devices. 



[Translation done.] 
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* NOTICES * 

JPO and NCIPI are not responsible for any 
damages caused by the use of this translation. 

1 This document has been translated by computer. So the translation may not reflect the original precisely. 

2.**** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] This invention is applied to renewal of the cryptographic key especially used at the 
time of the cryptocommunication between communication devices about the storage which recorded the 
renewal approach of a cryptographic key, and the renewal program of a cryptographic key, and relates to 
an effective technique. 
[0002] 

[Description of the Prior Art] According to the place which this invention person examined, for example 
between the communication devices with which cryptocommunication is performed in the system by which 
network connection of the communication devices, such as a personal computer, was carried out, the 
encryption key used in the case of the data encryption which communicates mutually, and a decryption is 
shared, and cryptocommunication is performed by using the cryptographic key. 

[0003] In addition, as an example to which the encryption communication technology of this kind of 
network is stated in detail, they are July 30, 1996. Ohm-Sha Issue, and D.Brent. Chapman, Elizabeth There 
are D.Zwicky (work) and "fire wall construction Internet SEKYURITE" P393, and distribution of the key of 
the network level encryption in the Internet is indicated by this reference. 
[0004] 

[Problem(s) to be Solved by the Invention] However, in cryptocommunication with the above encryption 
keys, this invention person found out that there were the following troubles. 

[0005] That is, in order to hold the safety of cryptocommunication, it is a burden with periodically, 
remarkable although it is desirable to change by the manager of a communication device in a short cycle as 
it has stroked so that it may be called every several hours changing a cryptographic key every several 
hours about a cryptographic key, and is substantially difficult. 

[0006] Moreover, according to the place which this invention person examined, there is also a problem 

which is explained below at the time of modification of a cryptographic key. 

[0007] First the cryptocommunication technique in network configuration is explained. 

[0008] As shown in drawing 1 7 , the communication devices 30-32 which perform cryptocommunication, 

such as a personal computer, are connected to the network 40, respectively. 

[0009] Here, the case where cryptocommunication is independently carried out, respectively between a 
communication device 30, a communication device 31 and a communication device 30, and a 
communication device 32 is explained. 

[0010] The manager of each communication device sets the encryption key for carrying out other 
communication devices and cryptocommunication as the communication device which he manages, before 
starting other communication devices and a communication link, namely, the manager of a communication 
device 30 — a communication device 31 and a communication device 32 — respectively — ** — the 
cryptographic key Kab1 for cryptocommunication, and Kac1 It is set as a communication device 30, 
respectively. The manager of a communication device 31 is the cryptographic key Kab1 for carrying out 
cryptocommunication to a communication device 30. It is set as a communication device 31. The manager 
of a communication device 32 is the cryptographic key Kac1 for carrying out cryptocommunication to a 
communication device 30. It is set as a communication device 32. 

[0011] Moreover, with a communication device 30, the packet addressed to communication device 31 is a 
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cryptographic key Kab1. It enciphers, and transmits to a communication device 31, and the packet 
addressed to communication device 32 is a cryptographic key Kac1. It enciphers and transmits to a 
communication device 32. 

[0012] Furthermore, the packet which received from the communication device 31 in the communication 
device 30 is a cryptographic key Kab1. The packet which decrypted and received from the communication 
device 32 is a cryptographic key Kac1. It decrypts. The packet addressed to communication device 30 is a 
cryptographic key Kab1 similarly with a communication device 31. It enciphers, and transmits to a 
communication device 30, and the packet which received from the communication device 30 is decrypted 
by the cryptographic key Kab1. Also with a communication device 32, the packet addressed to 
communication device 30 is a cryptographic key Kac1. The packet which enciphered, transmitted to the 
communication device 30 and received from the communication device 30 is a cryptographic key Kac1. It 
decrypts. 

[0013] Cryptocommunication is performed as mentioned above between a communication device 30 and a 
communication device 31 and between a communication device 30 and a communication device 32. 
[0014] Next, drawing 16 explains the procedure when changing a cryptographic key, and drawing 17 
explains a sequence. 

[0015] First, in drawing 18 , axes of ordinate J1 and J2 are time-axes, and processing of a communication 
device 30 is shown in the left-hand side of a shaft J1, they show processing of a communication device 31 
to the right-hand side of a shaft J2, respectively, and the commo data between a communication device 30 
and a communication device 31 is expressed between the shaft J1 and the shaft J2. 
[0016] Cryptographic key Kab1 used for cryptocommunication in a communication device 30 It sets up. 
Cryptographic key Kab1 similarly used for cryptocommunication with a communication device 31 It sets up. 
K (I) decides to express the data which enciphered Data I by the cryptographic key K here. 
[0017] With a communication device 30, it is the data la addressed to communication device 31. 
Cryptographic key Kab1 It enciphers, the code data Kab (la) are generated, and it transmits to a 
communication device 31. The communication device 31 which received this is a cryptographic key Kab1 
about the code data Kab (la). It decrypts and is Data la. It takes out. 
[0018] Next, the case where a cryptographic key is changed is explained. 

[0019] Since there is no means to change a cryptographic key into coincidence with a communication 
device 30 and a communication device 31, each modification will shift for a while in time. Here, it is 
assumed that modification of the cryptographic key in a communication device 30 arose previously. 
[0020] a communication device 30 — a cryptographic key — Kab1 from — it changes into K f ab1. Data lb 
addressed to communication device 31 It enciphers by encryption key K'abl, code data K'ab (lb) is 
generated, and it transmits to a communication device 31. The communication device 31 which received 
K'ab (lb) is the encryption key Kab1 about code data K'ab (lb). It decrypts. 

[0021] In this case, a communication device 31 is the original data lb. It cannot take out. That is, it is K 
about what decrypted Data I by the cryptographic key K. If it is expressing (I), the value which the 
communication device 31 took out will serve as K ab !=(K ab (lb)) lb. 

[0022] Therefore, in order to solve the problem of the time lag of cryptographic key modification which 
occurs between the communication devices 30 and communication devices 31 which perform this 
cryptocommunication, cryptocommunication is interrupted temporarily, after changing the key of each 
communication device, cryptocommunication must be made to resume, and there is a problem that the 
communication link between communication devices must once be interrupted. 

[0023] The purpose of this invention is to offer the storage which recorded the renewal approach of a 
cryptographic key and the renewal program of a cryptographic key which can change a cryptographic key, 
without making the load accompanying cryptographic key modification of a device-management person 
mitigate, and interrupting a communication link. 
[0024] 

[Means for Solving the Problem] The renewal approach of a cryptographic key of this invention creates the 
cryptographic key table which consisted of identifiers which specify two or more cryptographic key and 
each cryptographic key in the communication device which performs cryptocommunication. The 1st 
communication device of the communication devices which perform cryptocommunication chooses the 
identifier from a cryptographic key table. The 2nd communication device with which the identifier was 
notified to the 2nd communication device of the communication devices which perform 
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cryptocommunication, and the 1 st communication device and identifier were notified takes out the 
cryptographic key corresponding to an identifier from this cryptographic key table. 
[0025] Moreover, respectively the same master key is held, the 1st communication device of the 
communication devices which perform cryptocommunication generates a hash key, the communication 
device with which the renewal approach of a cryptographic key of this invention performs 
cryptocommunication notifies the hash key concerned to the 2nd communication device of the 
communication devices which perform cryptocommunication, and this 1st communication device and the 
2nd communication device make it the cryptographic key which updated the result of having hashed the 
master key with the hash key. 

[0026] Furthermore, the renewal approach of a cryptographic key of this invention creates the 
cryptographic key master table which consisted of identifiers which specify two or more cryptographic key 
and each cryptographic key in the communication device which performs cryptocommunication. The 1st 
communication device of the communication devices which perform cryptocommunication chooses one 
identifier from a cryptographic key master table. The identifier is notified to the 2nd communication device 
of the communication devices which perform cryptocommunication. The 1st communication device which 
performs cryptocommunication generates a hash key, and notifies the generated hash key to the 2nd 
communication device. The cryptographic key corresponding to the identifier as which the 1 st 
communication device and 2nd communication device were chosen is taken out from a cryptographic key 
master table, and it considers as the cryptographic key which updated the result of having hashed the 
cryptographic key with the hash key. 

[0027] Moreover, the step which creates the cryptographic key table which records correspondence with 
an identifier for the storage of this invention to specify two or more cryptographic key and each 
cryptographic key in the communication device which performs cryptocommunication, The step which 
chooses the identifier corresponding to one cryptographic key in two or more cryptographic keys, and this 
cryptographic key from a code table in case the communication device which performs 
cryptocommunication transmits data, It consists of a step which notifies the selected identifier to the 
communication device of a data transmission place, and a step which takes out the cryptographic key to 
which this identifier corresponds from a cryptographic key table according to reception of the identifier 
notified by cryptocommunication from other communication devices. 

[0028] By the above thing, since it is necessary to make a change of a cryptographic key to no 
communication devices, a managers burden can be mitigated sharply and the setting mistake of a 
cryptographic key can also be prevented. 

[0029] Moreover, since it is not necessary to stop temporarily the communication device at the time of 
renewal of a cryptographic key, working efficiency can be improved. 

[0030] Furthermore, since the updating data used in order to update a cryptographic key between 
communication devices are not cryptographic key itself, security can be raised sharply. 
[0031] Moreover, it will be as follows if the outline of other solution means is explained briefly. 
[0032] Other solution means are the updating approaches of a cryptographic key used in case two or more 
communication devices are connected in a network and cryptocommunication is performed among said two 
or more communication devices. The cryptographic key table which consisted of identifiers which specify 
two or more cryptographic key and each cryptographic key in the communication device which performs 
said cryptocommunication is created. The 1st communication device of said communication devices which 
perform cryptocommunication chooses an identifier from said cryptographic key table. It passes and 
notifies to the 2nd communication device of the communication devices which encipher the identifier by 
the cryptographic key and perform said cryptocommunication. Said 2nd notified communication device 
decodes the identifier enciphered by the cryptographic key. Said 2nd communication device which decoded 
said the 1st communication device and identifier takes out the cryptographic key corresponding to an 
identifier from said cryptographic key table, and cryptocommunication is performed between the said 1 st 
and 2nd communication device using this cryptographic key. 

[0033] Moreover, as for other solution means, two or more communication devices are connected in a 
network. It is the updating approach of a cryptographic key used in case cryptocommunication is performed 
among said two or more communication devices. The communication device which performs said 
cryptocommunication holds the same master key, respectively, and the 1st communication device 
generates a hash key among said communication devices which perform cryptocommunication. Encipher 
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said hash key by ****** and said enciphered hash key is notified to the 2nd communication device of the 
communication devices which perform said cryptocommunication. The hash key with which said 2nd 
communication device with which said hash key was notified was this enciphered by the cryptographic key 
is decoded, and cryptocommunication is performed between the said 1st and 2nd communication device by 
making into a cryptographic key the result to which said 1st and 2nd communication device hashed the 
master key with the hash key. 

[0034] Furthermore, as for other solution means, two or more communication devices are connected in a 
network. It is the updating approach of a cryptographic key used in case cryptocommunication is performed 
among said two or more communication devices. The cryptographic key master table which consisted of 
identifiers which specify two or more cryptographic key and each cryptographic key in the communication 
device which performs said cryptocommunication is created. The 1st communication device of the 
communication devices which perform said cryptocommunication chooses the identifier of arbitration from 
said cryptographic key master table. It notifies to the 2nd communication device of the communication 
devices which encipher the identifier by the cryptographic key and perform said cryptocommunication. Said 
1 st communication device generates a hash key, enciphers said hash key by this cryptographic key, and 
notifies to said 2nd communication device. Said 2nd communication device with which the enciphered 
identifier was notified decodes the enciphered identifier and said hash key. The cryptographic key 
corresponding to an identifier is taken out from said cryptographic key master table, the result of having 
hashed the cryptographic key with said hash key is made into a cryptographic key, and 
cryptocommunication is performed between the said 1st and 2nd communication device using the 
cryptographic key. 
[0035] 

[Embodiment of the Invention] Hereafter, the gestalt of operation of this invention is explained to a detail 
based on a drawing. 

[0036] (Gestalt 1 of operation) The block diagram of the cryptographic key table according [ the 
explanatory view of cryptographic key modification processing according / the block diagram in the 
communication device according / the explanatory view of the network configuration in the communication 
device according / drawing 1 / to the gestalt 1 of operation of this invention and drawing 2 / to the gestalt 
1 of operation of this invention, drawing 3 , and drawing 4 / to the gestalt 1 of operation of this invention 
and drawing 5 ] to the gestalt 1 of operation of this invention, drawing 6 , and drawing 7 are the flow charts 
of cryptographic key modification by the gestalt 1 of operation of this invention. 
[0037] In the gestalt of this operation, the communication devices 1-3 with which the network 
configuration which performs cryptocommunication performs cryptocommunication, such as a personal 
computer, as shown in drawing 1 are connected to the network 4, respectively. Moreover, 
cryptocommunication shall be independently performed in this case, respectively between a communication 
device 1 and a communication device 2 and between a communication device 1 and a communication 
device 3. 

[0038] Next, the configuration in a communication device 1 is explained using drawing 2 . 
[0039] First, a communication device 1 is constituted by the bus controller 1 1 which performs control of 
CPU 10 and the bus which manage all control of a floppy disk drive 5, a hard disk drive 6, CD-ROM drive 7, 
81 -8n of communication link controllers, main memory 9, and a communication device 1, and these are 
connected by the internal bus 12. 

[0040] And a communications program and the cryptographic key table mentioned later are installed on a 
hard disk from a floppy disk drive 5 or CD-ROM drive 7, or performs loading to the direct main memory 9. 
Moreover, when it installs on a hard disk, loading shall be performed from a hard disk to main memory 9. 
Furthermore, it is also installable in other communication devices through a network 4 from a floppy disk 
drive 5 or CD-ROM drive 7. 

[0041] In addition, a cryptographic key table may be stored in a floppy disk drive 5 or CD-ROM drive 7 in 
the form of a cryptographic key table, and may be generated by the cryptographic key table generator from 
other data. 

[0042] 81 -8n of next, communication link controllers The data transfer with transceiver buffer 9a which 
should perform only physical-level (below MAC layer) control, and was prepared in main memory 9 is 81-8n 
of communication link controllers. The prepared Direct Memory Access (DMA) performs. 81 -8n of 
moreover, communication link controllers Forming CPU 10 inside and operating a communications program 
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there and 81 -8n of communication link controllers CPU 10 is able to form a transceiver secondary buffer 
inside and to carry out data transfer between transceiver buffer 9a on main memory 9. Moreover, in 
drawing 2 , although the circuitry in a communication device 1 was explained, the other communication 
devices 2 and 3 are also considered as the same configuration. 

[0043] Next, a setup of the cryptographic key in each communication device is explained. 
[0044] First, as shown in drawing 3 , the cryptographic key table which performs cryptocommunication to 
each communication device 1-3, which has registered two or more cryptographic keys for every partner 
and which is mentioned later is set up. That is, the cryptographic key tables Tab and Tac used in order to 
carry out cryptocommunication to each of a communication device 2 and a communication device 3 are set 
to a communication device 1. 

[0045] Moreover, the cryptographic key table Tab for performing a communication device 1 and 
cryptocommunication is set to a communication device 2, and the cryptographic key table Tac for 
performing a communication device 1 and cryptocommunication is set to a communication device 3. 
[0046] Here, the cryptographic key table Tab of a communication device 1 , the cryptographic key table Tab 
of a communication device 2, and the communication device 1 cryptographic-key table Tac and the 
cryptographic key table Tac of a communication device 3 are the same respectively. Furthermore, these 
consist of ID which is the identifiers of the arbitration corresponding to two or more cryptographic key and 
each key. 

[0047] And it specifies [ which key is used out of a cryptographic key table using this ID, and ]. For 
example, in using the key of ID=5 by the cryptocommunication between a communication device 1 and a 
communication device 2, it sets ID=5 as each communication device 1 and 2 as initial value. Similarly, in 
using the key of ID=3 by the cryptocommunication between a communication device 1 and a 
communication device 3, it sets ID=3 as each communication device 1 and 3 as initial value. 
[0048] Next, in each communication device 1-3, based on set-up ID, one cryptographic key is taken out 
from each cryptographic key table, it uses for the code of the data to transmit, and the decode of data 
which received, and cryptocommunication is performed. 

[0049] For example, if the cryptographic key of ID=n is expressed as K [ID=n], the cryptographic key used, 
respectively by the cryptocommunication between a communication device 1 and a communication device 
2 and between a communication device 1 and a communication device 2 will turn into a cryptographic key 
Kab [ID=5] and a cryptographic key Kac [ID=3], respectively. 

[0050] Here, the case where the cryptographic key of the cryptocommunication between a communication 
device 1 and a communication device 2 is changed is explained using drawing 4 . 
[0051] First, ID of a cryptographic key is changed into ID=8 with a communication device 1. In a 
communication device 1, the cryptographic key Kab equivalent to ID=8 [ID=8] is taken out from the 
cryptographic key table Tab. 

[0052] ID=8 are transmitted to a communication device 2 as ID change command HC from a 
communication device 1 at this and coincidence. In a communication device 2, ID=8 are taken out from this 
ID change command HC, and the cryptographic key Kab equivalent to ID=8 [ID=8] is taken out from the 
cryptographic key table Tab. 

[0053] By this, since the encryption key of a communication device 1 and a communication device 2 can 
be changed, the cryptocommunication between a communication device 1 and a communication device 2 
becomes possible [ continuing using the changed cryptographic key Kab [ID=8] ]. 

[0054] In addition, as for a cryptographic key table, enciphering and holding is desirable. Moreover, as for ID 
change command HC, enciphering and transmitting is desirable. Furthermore, as for the cryptographic key 
when enciphering ID change command HC, it is desirable that it is an encryption key before modification. 
Moreover, Tac of the cryptographic key table Tab of a communication device 1 and a communication 
device 2, a communication device 1, and a communication device 3 may be the same. 

[0055] That is, or it is plurality, the same cryptographic key table may be used in the cryptocommunication 
between all the communication devices 1-3. In that case, the number of the same cryptographic key tables 
set to a communication device 1 may be one, and ID may also use the same ID among two or more 
communication devices. 

[0056] Moreover, the manager of a communication device may specify ID to change and it may be chosen 
with the random number in a communication device 1-3. 

[0057] Next, the configuration of the cryptographic key table Tab ( drawing 3 ) is shown in drawin g 5 . 
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[0058] The cryptographic key table Tab consists of a field holding two or more cryptographic keys Kab, and 
a field holding ID which is an identifier corresponding to it. 

[0059] The procedure in a communication device 1 is explained using the processing flow shown in drawing 
3 - drawing 5 , and drawing 6 . 

[0060] First, cryptographic key Kz by which CPU10 performs a setup of ID=5 with the cryptographic key 
table Tab (step S101), and is equivalent to ID=5 from the cryptographic key table Tab with initial setting It 
chooses (step S102). 

[0061] Next, CPU 10 sets a transmitting counter as zero (step S103), and starts cryptocommunication (step 
S104). And CPU10 is a cryptographic key Kz about the packet addressed to communication device 2. It 
enciphers, and transmits to a network 4 (step S105), and a transmitting counter is incremented one time 
(step S106). 

[0062] Then, when a transmitting counter is less than 100, the cryptocommunication addressed to return 
and communication device 2 is repeated to processing of step S105. 

[0063] Moreover, CPU 10 shifts to an update process of ID, when a transmitting counter is 100 or more 
(step S107). CPU 10 chooses ID=8 [ new ] with a random number (step S108), and is a cryptographic key 
Kx about the ID=8. The enciphered data Kx [ID=8] are added to ID change command HC, and it transmits 
to a communication device 2 to a network 4 (step S109). 

[0064] And cryptographic key Ku corresponding to ID=8 from return and the cryptographic key table Tab to 
processing of step S102 It takes out. Then, it is a cryptographic key Ku until it resets a transmitting 
counter to zero and a transmitting counter becomes 100 or more henceforth. It transmits by using and 
enciphering the packet addressed to communication device 2. 

[0065] Next, the procedure in a communication device 2 is explained using drawing 3 - drawing 5 , and 
drawing 7 . 

[0066] First, cryptographic key Kz which is equivalent to ID=5 from the cryptographic key table Tab after 
CPU 10 sets up the cryptographic key table Tab and ID=5 by initial setting (step 201) It chooses (step 
S202). 

[0067] Next, the packet which received from the communication device 1 is written in transceiver buffer 
9a, and CPU 10 is a cryptographic key Kz. It uses and decodes (step S203). The packet which decoded 
CPU 10 distinguishes whether it is ID change command HC (step S204). 

[0068] And when this packet is not ID change command HC, CPU10 performs reception (for example, data 
are handed over to application) which was adapted for this packet (step S205), and returns to processing 
of step S203. On the other hand, when this packet is the ID change command 33, CPU 10 takes out ID=8 
changed from this packet (step S206). 

[0069] And cryptographic key Ku corresponding to 10=8 of return and the cryptographic key table Tab to 
processing of step S202 It takes out. henceforth — until it receives new ID change command — until 
cryptographic key Ku The packet which used and received from the communication device 1 is decrypted. 
[0070] Between a communication device 1 and a communication device 2, it is a cryptographic key Kz until 
ID change command HC is sent from a communication device 1 as mentioned above. After it used and ID 
change command HC was received by the communication device 2, between a communication device 1 and 
a communication device 2, it is a cryptographic key Ku. It can use and cryptocommunication can be 
performed. 

[0071] Therefore, a communication device manager only sets the cryptographic key table Tab and ID=5 as 
a communication device 1 and a communication device 2 as initialization information, respectively, and, 
after that, a key is updated automatically. 

[0072] Moreover, with the gestalt of this operation, although the decision value of a transmitting counter 
was set as 100, a manager may set up this decision value freely. Moreover, as for the cryptographic key 
table Tab, holding to the field which cannot access except a manager is desirable, and it is desirable to 
encipher and hold the cryptographic key table Tab itself by another cryptographic key. 
[0073] Here, in order to usually decode a cipher, huge time amount and computer power are needed. 
However, it cannot declare that it is impossible to find out a cryptographic key also by chance. Therefore, 
if the cryptographic key is used at all when a third person gets a cryptographic key by chance, all ciphers 
will become decipherable for a third person. 

[0074] Then, in the gestalt 1 of this operation, it is made to make the evil by the above-mentioned trouble 
by changing a cryptographic key periodically into the minimum. 
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[0075] That is, if a third person gets a cryptographic key also by chance as mentioned above, a third 
person will become possible [ decoding a cipher using the cryptographic key ]. Since the cryptographic key 
is changed periodically, it becomes impossible however, for a third person to decode a cipher. 
[0076] Thus, very primary that a cipher is decoded and all data are not decoded. Furthermore, the data 
decoded can be pressed down by shortening modification spacing of a cryptographic key to the minimum. 
[0077] (Gestalt 2 of operation) The explanatory view of cryptographic key modification processing 
according [ drawing 8 and drawing 9 ] to the gestalt 2 of operation of this invention, drawing 10 , and 
drawing 1 1 are the flow charts of cryptographic key modification by the gestalt 2 of operation of this 
invention. 

[0078] In the gestalt 2 of this operation, drawing 1 mentioned above and the procedure of setting a 
cryptographic key as each communication device 1-3 in the same system configuration as drawing 2 are 
explained using drawing 8 . 

[0079] First, the hash key HK for generating a cryptographic key, applying a hash to the master key MK 
and the master key MK for every partner who performs cryptocommunication to each communication 
device 1-3 is set up. 

[0080] That is, the master keys MKab and MKac for generating the cryptographic key used when 
performing cryptocommunication with a communication device 2 and a communication device 3, 
respectively, and the hash keys HKab and HKac are set to a communication device 1. 
[0081] Moreover, the master key MKab for generating the cryptographic key used when using a 
communication device 1 and cryptocommunication, and the hash key HKab are set to a communication 
device 2. In addition, the master key MKab of a communication device 1, the master key MKab of a 
communication device 2, and the hash key HKab of a communication device 1 and the hash key HKab of a 
communication device 2 are the same respectively. 

[0082] The master key MKac for generating the cryptographic key which similarly is used for it when 
performing a communication device 1 and cryptocommunication also to a communication device 3, and the 
hash key HKac are set up. In addition, the master key MKac of a communication device 1, the master key 
MKac of a communication device 3, and the hash key HKac of a communication device 1 and the hash key 
HKac of a communication device 3 are the same respectively. 

[0083] In each communication device 1-3, encryption key K=HK (MK) is generated from the master key MK 
and the hash key HK. In order to perform cryptocommunication between a communication device 1 and a 
communication device 2, in a communication device 1 and a communication device 2, a cryptographic key 
HKab (MKab) is generated, respectively. Moreover, between a communication device 1 and a 
communication device 2, cryptocommunication is performed using this cryptographic key HKKab (MKab). 
[0084] Here, the procedure of changing a cryptographic key is explained using drawing 9 . 
[0085] First, a hash key is changed in a communication device 1. The manager of a communication device 1 
may perform the modification approach, and it may be searched for from the random number in a 
communication device. 

[0086] If the hash key of a communication device 1 is changed into hash key HK'ab, encryption key 
K=HKab (MKab) will be generated in a communication device 1. A communication device 1 transmits 
changed hash key HKab to a communication device 2 with the hash key change command HHC at 
coincidence. The communication device 2 which received the hash key change command HHC takes out 
hash key HK'ab from this hash key change command HHC, and generates cryptographic key HK'ab (MKab) 
using this hash key HK'ab. 

[0087] Henceforth, cryptocommunication is performed using cryptographic key HKab (MKab) between a 
communication device 1 and a communication device 2. In addition, a master key and a hash key are 
enciphered and held, and are as desirable as Lycium chinense, and it is desirable to also encipher and 
transmit the hash key change command HHC. 

[0088] Moreover, as for the encryption key when enciphering the hash key change command HHC, it is 
desirable to use the cryptographic key before modification. Furthermore, even when both a master key, a 
hash key or a master key, and a hash key are the same at plurality or all communication devices, it is good. 
In that case, you may use it in common [ without holding the same master key or the same hash key for 
every communications partner within one communication device ]. 

[0089] Next, the procedure in a communication device 1 is explained using the processing flow shown in 
drawin g 8 , drawin g 9 , and drawing 10 . 
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[0090] First, by initial setting, CPU10 sets up the master key MKab and the hash key HKab (step S301), 
and sets a transmitting timer to zero (step S302). In addition, this transmitting timer shall be automatically 
updated in another task, or renewal of automatic shall be carried out by hardware. 

[0091] And CPU 10 sets the result (=HKab (MKab)) of having hashed the master key with the hash key as a 
cryptographic key K (step S303), and starts cryptocommunication (step S304). 

[0092] The packet addressed to communication device 2 is enciphered by the cryptographic key K, and it 
transmits to a network 4 (step S305). Then, a transmitting timer is read (step S306) and it judges whether 
the transmitting timer is over 5 minutes (step S307). 

[0093] Here, when this transmitting timer is less than 5 minutes, the following packet addressed to return 
and communication device 2 is enciphered to processing of step S304 by the cryptographic key K, and it 
transmits to it to a network 4. 

[0094] On the other hand, when this transmitting timer is over 5 minutes, an internal random number 
generates new hash key HKab (step S308), new hash key HK'ab is enciphered by the cryptographic key K, 
the this enciphered data are added to the hash key change command 47, and it transmits to the addressing 
network 4 to communication device 2 (step S309), it returns to step S302, and a transmitting timer is again 
set to zero. 

[0095] Then, the result (= HK'ab (MKab)) of having hashed the master key MKab by new hash key HK'ab is 
set as the new cryptographic key K. Henceforth, the packet addressed to communication device 2 is 
enciphered using the new cryptographic key K until a transmitting timer value exceeds 5 minutes, and the 
this enciphered packet is transmitted to a network 4. 

[0096] Next, the procedure in a communication device 2 is explained using drawing 8 , drawing 9 , and 
drawing 1 1 . 

[0097] First CPU10 sets up the master key MKab and the hash key HKab by initial setting (step S401). 
And the result (=HKab (MKab)) to which CPU 10 hashed the master key with the hash key is set as a 
cryptographic key K (step S402). 

[0098] If the packet transmitted from the communication device 1 is received from a network 4, this 
packet will be written in transceiver buffer 9a, and CPU 10 will decrypt by the cryptographic key K (step 
S403). It judges whether the packet which CPU10 this decoded is the hash key change command HHC 
(step S404). 

[0099] And when it is not the hash key change command HHC, CPU 10 performs reception (for example, 
data are handed over to application) which was adapted for this packet (step S405), and returns to 
processing of step S403. 

[0100] On the other hand, when this packet is the hash key change command HHC, CPU10 takes out hash 
key HK'ab changed from this packet (step S406). And the result (= HK'ab (MKab)) hashed by new hash key 
HK'ab which took [ above-mentioned ] out return and the master key MKab picking is set as processing of 
step S402 as a new cryptographic key K. Henceforth, the packet which received from the communication 
device 1 using the cryptographic key K is decrypted until it receives a new hash key change command. 
[0101] After the hash key change command HHC is received by the communication device 2 using a 
cryptographic key K (=HKab (MKab)), between a communication device 1 and a communication device 2, 
cryptocommunication can be performed between a communication device 1 and a communication device 2 
using a cryptographic key K (=HK'ab (MKab)), until the hash key change command HHC is sent from a 
communication device 1 as mentioned above. 

[0102] Therefore, renewal of a key will be automatically performed only by a communication device 
manager setting the master key MKab and the hash key HKab as a communication device 1 and a 
communication device 2 as initialization information, respectively. 

[0103] In addition, in the gestalt 2 of this operation, although the decision value of a transmitting timer was 
set up in 5 minutes, a manager may set up this decision value freely. Moreover, as for the master key MKab 
and the hash key HKab, holding to the field which cannot access except a manager is desirable. It is 
desirable to encipher and hold the master key MKab and the hash key HKab itself by another cryptographic 
key furthermore. 

[0104] Moreover, it can prevent that make decode of a cipher very into a primary thing, and all data are 
decoded by changing a cryptographic key periodically also with the gestalt 2 of this operation. Furthermore, 
the data decoded can be pressed down by shortening modification spacing of a cryptographic key to the 
minimum. 
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[0105] (Gestalt 3 of operation) The cryptographic key master table according [ the explanatory view of 
cryptographic key modification processing according / drawing 12 and drawing 1 3 / to the gestalt 3 of 
operation of this invention and drawing 14 ] to the gestalt 3 of operation of this invention, drawing 1 5 , and 
drawing 1 6 are the flow charts of cryptographic key modification by the gestalt 3 of operation of this 
invention. 

[0106] The gestalt 3 of this operation explains drawing 1 mentioned above and the procedure of setting a 
cryptographic key as each communication device 1-3 in the same system configuration as drawing 2 , using 
drawing 12 . 

[0107] The same cryptographic key master table MT is set to each communication device 1-3. This code 
master table key MT consists of ID corresponding to two or more cryptographic keys (MK [ID]) and it. 
[0108] K=HK (MK [ID]) which hashed two or more cryptographic keys MK [ID] with the hash key HK 
generates the cryptographic key K when actually performing cryptocommunication. Here, if ID and the hash 
key for generating the cryptographic key for the cryptocommunication between a communication device 1 
and a communication device 2 are set as a communication device 1 and a communication device 2 with 
ID=6 and HKab, respectively, in a communication device 1 and a communication device 2, cryptographic 
key K=HKab (MK [6]) will be generated, respectively. 

[0109] And cryptocommunication is performed using this cryptographic key K. If ID and the hash key for 
generating the cryptographic key for the cryptocommunication between a communication device 1 and a 
communication device 3 similarly are set to ID=8 and HKac at a communication device 1 and a 
communication device 2, respectively, in a communication device 1 and a communication device 2, 
cryptographic key K=HKac (MK [8]) will be generated, respectively. And cryptocommunication is performed 
using this cryptographic key K. 

[01 10] Next, the procedure of changing the cryptographic key between a communication device 1 and a 
communication device 2 is explained using drawing 13 . 

[01 1 1] First, ID and the hash key of a communication device 1 are changed into ID=5 and hash key HK'ab, 
respectively. Cryptographic key K=HK'ab (MK [5]) is generated in a communication device 1. 
[0112] It can come, simultaneously a communication device 1 notifies ID=5 and hash key HKab which were 
changed to a communication device 2 with the key change command KHC. The communication device 2 
which received this key change command KHC takes out ID=5 and hash key HK'ab from this key change 
command KHC, and generates cryptographic key K=HK'ab (MK [5]). between a communication device 1 and 
a communication device 2 — this — ****** — cryptocommunication is performed using a cryptographic 
keyK. 

[0113] In addition, as for a cryptographic key master table, enciphering and holding is desirable. As for a 
key change command, enciphering and transmitting is desirable. As for the cryptographic key when 
enciphering a key change command, it is desirable that it is the cryptographic key before changing. 
Although [ a cryptographic key master table / with a system ] it is the same, another table may be used 
for it for every communications partner. Although it was made the value of the proper for every 
communications partner, even if ID and a hash key are common to a system in ID, a hash key, or both, they 
are good. 

[0114] Next, the configuration of the cryptographic key master table MT is shown in drawing 1 4 . 

[01 15] The cryptographic key master table MT consists of a field holding two or more cryptographic keys 

K, and a field holding the identifier ID corresponding to it. 

[0116] Here, the procedure in a communication device 1 is explained using the processing flow shown in 
drawing 12 - drawing 14 , and drawing 15 . 

[0117] First, CPU10 sets up the cryptographic key master table MT, and ID=6 and the hash key HKab by 
initial setting (step S501). Next, CPU 10 is the code master key Kw which is equivalent to ID=6 from the 
cryptographic key master table MT. It chooses and is this master cryptographic key Kw. The result (=HKab 
(Kw)) hashed with the hash key HKab is set up as a cryptographic key K (step S502), and 
cryptocommunication is started (step S503). 

[01 18] And it judges whether the packet addressed to communication device 2 is enciphered by the 
cryptographic key K, it transmits to a network 4 ( drawin g 1 ) (step S504), and CPU 10 has a cryptographic 
key change request (step S505). 

[0119] Here, this cryptographic key change request is using a manager interface and directing modification 
(it being specifically a setup of new ID and a hash key) of a cryptographic key, in order that a manager's 
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may change a cryptographic key, and the key change-request flag which the program of a communication 
device can read is set by these directions. Moreover, it is judged that the program of a communication 
device has a cryptographic key change request by having set this key change-request flag. 
[0120] Next, when the manager is not performing the change request of a cryptographic key, since this 
cryptographic key change-request flag is not set return and the packet addressed to communication 
device 2 are again enciphered by the cryptographic key K succeedingly to processing of step S504, and 
this packet is transmitted to a network 4. 

[0121] On the other hand, when a manager performs the change request of a cryptographic key with a 
predetermined input means, by CPU10, ID=5 and hash key HK'ab which the cryptographic key change- 
request flag was set up on main memory 9, and were set up newly are read, and this cryptographic key 
change-request flag is reset (step S506). 

[0122] CPU10 is this reading **** — the data which enciphered ID=5 and hash key HK'ab by the 
cryptographic key K are added to the key change command KHC, and it transmits to a communication 
device 2 to a network 4 (step S507). 

[0123] Cryptographic key Ky corresponding to ID=5 from return and the cryptographic key master table MT 
to processing of step S502 It takes out. And it is a cryptographic key Ky until a cryptographic key change- 
request flag is set. It uses, and the packet addressed to communication device 2 is enciphered, and it 
transmits. 

[0124] Next, the procedure in a communication device 2 is explained using drawing 12 - drawing 14 , and 
drawin g 1 7 . 

[0125] First, CPU 10 sets up the cryptographic key master table MT, and ID=6 and the hash key HKab by 
initial setting (step S601). CPU 10 is the code master key Kw which is equivalent to ID=6 from the 
cryptographic key master table MT. It chooses and is this master cryptographic key Kw. The result (=HKab 
(Kw)) hashed with the hash key HKab is set up as a cryptographic key K (step S602). 
[0126] And CPU 10 is a cryptographic key Kw about the packet which received from the communication 
device 1. It decodes by using (step S603). The decoded this packet performs reception (for example, data 
are handed over to application) by which CPU10 was adapted for this packet when this packet was not the 
key change command KHC by CPU 10 distinguishing whether it is the key change command KHC (step 
S604) (step S605), and it returns to processing of step S603. 

[0127] On the other hand, when this packet is the key change command KHC, CPU 10 takes out ID=5 and 
hash key HK'ab which were changed from this packet (step S606). 

[0128] And cryptographic key Ky corresponding to ID=5 of return and the cryptographic key master table 
MT to step S602 It takes out. Henceforth, it is a cryptographic key Ky until it receives a new key change 
command. The packet which used and received from the communication device 1 is decrypted. 
[0129] Between a communication device 1 and a communication device 2, it is a cryptographic key Kw until 
the key change command KHC is sent from a communication device 1 as mentioned above. After it used 
and the key change command KHC was received by the communication device 2, between a 
communication device 1 and a communication device 2, it is a cryptographic key Ky. It can use and 
cryptocommunication can be performed. 

[01 30] Therefore, a communication device manager sets the cryptographic key master table MT and ID=6 
as a communication device 1 and a communication device 2 as initialization information, respectively, 
required information will only be set as one communication device to change a key, and, after that, renewal 
of a key will be performed automatically. 

[0131] In addition, as for the cryptographic key master tables MT and ID and a hash key, holding to the 
field which cannot access except a manager is desirable. Furthermore, as for the cryptographic key master 
tables MT and ID and a hash key, it is desirable to encipher and hold itself by another cryptographic key. 
[0132] Moreover, it can prevent that make decode of a cipher very into a primary thing, and all data are 
decoded by changing a cryptographic key periodically also according to the gestalt 3 of this operation. 
Furthermore, the data decoded can be pressed down by shortening modification spacing of a cryptographic 
key to the minimum. 

[0133] It cannot be overemphasized that it can change variously in the range which this invention is not 
limited to the gestalt of said operation, and does not deviate from the summary. 

[0134] For example, with the gestalten 1-3 of said operation, in between mutual communication devices, 
although the updating technique of a cryptographic key using the table according to individual was 
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indicated, two or more three or more communication devices may be made to update the common **** 
cryptographic key for tables. 

[0135] Moreover, in the gestalten 1-3 of said operation, a data encryption and enciphered processing of 

the double sign of data may be realized by any of software or hardware. 

[0136] 

[Effect of the Invention] 

(1) According to this invention, since it is necessary to make a change of a cryptographic key to no 
communication devices, a managers burden can be mitigated sharply and the setting mistake of a 
cryptographic key can also be prevented. 

[0137] (2) Moreover, in this invention, since the data which set and are carried out between communication 
devices at the time of renewal of a cryptographic key are not cryptographic key itself, security can be 
raised sharply. 

[0138] (3) Since it is not necessary to set to this invention and to stop temporarily the communication 
device at the time of renewal of a cryptographic key further, working efficiency can be improved more. 



[Translation done.] 
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* NOTICES * 

JPO and NCIPI are not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect the original precisely. 

2. **** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] It is the explanatory view of the network configuration in the communication device by the 
gestalt 1 of operation of this invention. 

[Drawing 2 ] It is a block diagram in the communication device by the gestalt 1 of operation of this 
invention. 

[Drawing 3] It is the explanatory view of the cryptographic key modification processing by the gestalt 1 of 
operation of this invention. 

[Drawing 4] It is the explanatory view of the cryptographic key modification processing by the gestalt 1 of 
operation of this invention. 

[Drawing 5] It is the block diagram of the cryptographic key table by the gestalt 1 of operation of this 
invention. 

[Drawing 6] It is the flow chart of cryptographic key modification by the gestalt 1 of operation of this 
invention. 

[Drawing 7] It is the flow chart of cryptographic key modification by the gestalt 1 of operation of this 
invention. 

[Drawing 8] It is the explanatory view of the cryptographic key modification processing by the gestalt 2 of 
operation of this invention. 

[Drawing 9] It is the explanatory view of the cryptographic key modification processing by the gestalt 2 of 
operation of this invention. 

[Drawing 10] It is the flow chart of cryptographic key modification by the gestalt 2 of operation of this 
invention. 

[Drawing 1 1] It is the flow chart of cryptographic key modification by the gestalt 2 of operation of this 
invention. 

[Drawing 12] It is the explanatory view of the cryptographic key modification processing by the gestalt 3 of 
operation of this invention. 

[Drawing 13] It is the explanatory view of the cryptographic key modification processing by the gestalt 3 of 
operation of this invention. 

[Drawing 14] It is a cryptographic key master table by the gestalt 3 of operation of this invention. 
[Drawing 15] It is the flow chart of cryptographic key modification by the gestalt 3 of operation of this 
invention. 

[Drawing 16] It is the flow chart of cryptographic key modification by the gestalt 3 of operation of this 
invention. 

[Drawing 1 7] It is the explanatory view of the cryptographic key modification processing which this 
invention person considered. 

[Drawing 18 ] It is a sequence diagram in the cryptographic key modification processing which this invention 
person considered. 
[Description of Notations] 

1-3 [ — A hard disk drive, 7 / — A CD-ROM drive and 81 -8n / — / — A transceiver buffer, 10 / — 
CPU, 11/ — Bus controller, / A communication link controller, 9 — Main memory 9a ] — A 
communication device, 4 — A network, 5 — A floppy disk drive, 6 12 [ — Master key — , HK / — A hash 
key, HHC / — A hash key change command, MT / — A cryptographic key master table, KHC / — Key 
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change command. ] — An internal bus, Tab, Tac — A cryptographic key table, Kab, Kac — A cryptographic 
key, a HC — ID change command, MK 

[Translation done.] 
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U afi««3 0 3ft»bg«L^^y MiBt-WiKacx 

[ooi3] suKD£o\zi,x&mmm3 otmmmm 
3 ifa*3j;ufffl«KiB3 otmmmu 3 2 w-ertp-^iift 

[0 0 14] #-§«S:ae3e+'*tto#|lOI«rEl 
[0 0 1 5] *i\ 01 8IC*5^T, IMfcJ 1, J 2 12 

2^ria»iiffSB3o^]fifittiE3 i<op*g<*> 

[0016] iiffiSB 3 0 i«HHMN£tt 5 fff-^i 

Ka^ PI«lcafS«fi3 l-Cfc«P*iiflTlC 

^pPf-^tKa^ ^n-CK t*- 

[0 0 17] ilft^B3 0-C«. ilft^®3 1$e<D^- 
*Ia SrBf^Kab, "CSf ^{L UPf -^t 5 -^ Kab (la 

LfciIft2£B3 1 H\ Pf^r-^Kab (la) £&f^-$i 
Kab! ■ea#ftU7 !r — ^ la ^O/U-To 

[0 0 18] vs*irm&&3i'tz>m&\z'o^xmw 

[0 0 19] MSI3 0<tiift^g3 lTl^^tCPf^ 

[0 0 2 0] ji{f3£®3 0-C»i N Pf-^lSrKab! 
K'ab^c^-tZ. mmmWl3 lftcD^r—? Ib £Bf-if- 
{UBK'ab^lt^flSU 1*^7*-* K'ab (Ib) 
b* iiff &B 3 1 $a\cmm-r*o K' ab ( I b ) 
ft bfciI{f^B3 1 fi, Bf^§"7 — *K'ab (Ib) 

[0 0 2 1] rcoj§^\ iift^B3 113, x;co^-^ I 



1 «r«#fkufet><o«:K (i) ^-rr^-rs 

iHS3£B3 l^^tJttibfcM^K ab (K' ab (I 
b ) ) * I b bftZo 
[0 0 2 2] <fcoT, ^<Z>«F-»ii«Srff 5iffi«KB3 0 
£iift&B3 1 tofWTjBfrSrtP-JHiaEMo^BOWrJx 

n^oa«KBo««r«XUfc«fcl»-8«««rWHI$ 
*fttt*UMr€>i\ ««§£BM<oiIf&&-fi+»bfctt 

[0023] *&m<D&&)\^ mwmw%<n*&fmm?L 

[0 0 24] 

ii^pu, m i<Dmmmm&£v^%i}+tm%i£titcm2 
fvb* h w "9 tij-r t> <o "C & 5 o 

[0 0 2 5] ^^^Pf^JEfr^fi. Pf-^ii 
^B<D 7 ^^>^ 2 ^iift»fi-.il^j 1 

[0026] $ btc, *&m<Dm tm&mxm*. «f# 

iSfi ^^t 5 iim^B{c*5^riS»c^ffir-^«ii: 

fP*U l«*a«Srff5ii««B<o5*>o*lcDii«» 
B*Sl«#«^^^^-^/^b— ooBftgiJ^-Sr»*ib. 
*<o«8iJ^«rflp*ii««rn 9 iift^B© 9 *>^» 2 oil 
«£B^ii*nU ft^-fflf&Sr^TSfBKOifiWttB^y 
^a»*r*rtU, ^L^Ny^a«Sr|S2 0iifffKfi 
«cffl*pu JBioii«lKfi*5J:ofJB2©iffif&Kfi*sa^ 

[0 0 2 7] **Woia«j«ttt:W: % «P*ifi««rfT 

5 iift^BJcioi>T«^Bt#«i ^fft^i^#^-r £ 
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[0028] $x±(d- t \zx *> % m^m^^T^x 

[0 0 2 9] Bff^«i<Oje3K^^*5»t5ii^@Sr 
r k&XZZ> 0 

[0030] mi&mmniz&^Xs m^m*^ 

[0 0 3 1] ^^ftfe<o#^©<D«JIS:tB5^tcIft 
[0 0 3 2] *©H&<0#»:^awU **Oil«Kfi*S* 

wj**i*#«c:* vmwt\.xm&m*mm*ftomm 
urn 2 (Dmmmm&ftfmic x m^tzntcm^z 

[0033] ^ote^wft^att, mivmmm 

X^mm &'<f 5 Steffi v ^ £ Ufr-JHgtf) K*r*&T?fo o 

U rtf^iim*tT5ttr823ift^B0 5t>^l 
oiIff=£B#'>:y^&££/£U »B^yS/a|IM 

^iSfi £tT 9 ilft^BO p ^ 2 <£>iIfi3£B— ii*n 
U lWIB>'Ny->afidSiB^$nfc«flB»2<oii«*B^ 

1, JS2<0»fiS6Ba5^***«r^y i/aiiaot^ 

mfflxft-ztmm&n o h(Dx&z 0 
[0034] znm&Mikmmi^ m&<omm 
mm&*y vv—txmmzfr. wi^m^<ommmm<r> 
m xm^mm &n ? m^m i > * je^&-c &> o 
t, «r«ai«^a«*tT5ii«*B«-*5v>r*»^iiip^i 



jaw-came* k *2©»«*BW]^pf*ffl«4r?T5fc 

[0 0 3 5] 

izm^xmmzim-rz. 

[0 0 3 6] (HlfeO^ 1 ) Hlft *«QB<7>jg%CD 

j^ab 1 ic j; z mmmm m*5 it s * ^ h y — * m&(D mm 
bl i2it *»w<o*aaio^jincj:aai«*BJc*5 

<DMmi^£z>v$^mT—j';i'<Dffif&m. me, m7 

[0 0 3 7] *H«S©^ttJc:*5V^T. Pf-§-ilft$rtT5^ 

y y^^/^ if o«F*ii«SrtT 5 iif&SB l ~ 
*ti?ti*y Yy — ? 4\£&m£tlX^Z 0 * 

mmi kmmmw3<Dmx*ti?t^&\zm&mm&n 

[0038] iiftsB i ic^jts«*srgi 2 &m 
^x®.w*tz> 0 

[0039] ^-r, a«36Bitt, 7nytr-^^^ 

h*7-f^5, Kx-f K7>T^6, CD-ROM 

K7^^7, If|pyhn-.78 1 ~8 n . ^-f >-^^e 
y9. ii^B l ot^T^l^iCPU l 0/irb 
^c/U^MfrvU^y^D-^ 1 l «dJ:0«j« 

[0 0 4 0] ^rbT, »«>^n^Afc«&i-si«-Wi 
-ROM K^^f ^7 ^6>/n— K9*-f f 

[0 0 4 1] ^/Hi, Pf-^^—yyu 
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0^7 0^^^^^ K^-f :/5£fcf*CD-R 
Bfffif-^^yo ^ 9 * J: 9 £ *LT <> J: 

[0 0 4 2] « 

(MACiJJJlT) ®m<D&$:ftoh<Dk U 

-r^^y 9tc^itb^^m^^7r 9 a £<o^— 

o-78 1 ~8 n KRttfcttfc^ 
h^^y T^irx (DMA) (C^oTfrPo £fc, 
ilfSzi^hn — 78j -8 n rtlCCPUl OSrKttT* 

-78i ~8 n rtra»{9:z&/<?7rfrKtt, CPU 

[oo4 3] zti?*h<Dmmmmz&vz>ftim 

[0 0 4 4] 03^i-j:9jr, ^tL-etL<Diim 

mm i - 3 ^Bff-^-iiftSrfT p 

[0 0 4 5] iiftKS 2 ICWC, iiff^e 1 £ 

ilff £?T 5 :^UTab£rtS:^£rfTV\ i§ 

«««3tettu iifi^Bi h^mmZfto tzftcom^ 
^-^A-TacCDtS^SrfT 9 . 

[0 0 4 6] r r x\ mmmm 1 ^fft-^^-^Tab 
tmmmm 2 <opf-^i^-y/uTab*5j:afii{t^@ 1 ut 

-J§-&X— 3/A-Tac £ ilft^g 3 (^Bf-^ix-^Tacfi 

^n^*ti^—<o s e $ fen. wftbte, isi&o 

[0 0 4 7] ^LT, rco I D&ffl^TI*-S*"7 l -://U 
iHtge® 1 i:lftS| 2 ©WOlftaffl-e I D = 5 <D« 

&m^*m&\a*. *ti?ti<K>mmmm 1 , 2^^ 

£e® 3 <z>ra<D«rtr»« -c I D = 3 GOS^BV^^tC 

ii, zti^tKommmm 1 , 3 tc^^fE t ur 1 d = 3 
[oo4 8] **L^*K&iMsja 1 - 3 -m, k 

feZftti I Dtcg^r^fr^ix^iii^^r-- ://ua>f> 

[0 0 4 9]fci:^ I D = ntf>Bf-J§«£K [ID = 

ms®i <tiim^®2^cD9f-^ii{t-r^n- : en^i-a 

Bf-fH^s **L«xltf-l§-*Kab [I D=5] fcitfpfr^ 



©Kac [I D= 3] £#£0 

[0050] rr-e, iifiStBi fci§ft&ta2tf>pa<aui 

[00 5 1 ] *i\ fflfiS® 1 ^tfHHfcO I fc<h 
;ttf, I D = 8 tC^E-T So iSft^g 1 "Ctt, Bf-*H&^ 
-y^Tab*>b I D=8^^-T6ffip-^iKab [ID = 
8] Sr»?)Wr. 

[0052] r.ixtra«F^ii«Siai35»t>ii«3fi«2^ 

I Df In W KHC i: LT I D = 8 iSriff ilft 
*«2T?tt, »IDM3-ryKHC^ID=8«rS 
•9 W m-^m^— Zf/UTabfrb I D = 8^*|^1-£B£ 
-*§H&Kab [ID = 8] «rflfc*)ffii- 0 

[0053] ^hiaox, sms® 1 tmmmm.2<o 
mwtmtm&xz z<dx, mmmm 1 t&mmm 2 m 

^3f^iim^MU^:9f^Kab [ID=8] Srffil^T 
[0 0 5 4] /^*3, Pf-^^-^/U^fff^t: L-Cffc» b 
tt, *^tUTaHS-r5rt*sa*UV\ ID 

iifts@2o»t-^i'r-^Tabi:i®^©i tmmm 
[0055] -r^ip^s aako^fctt-r^-c^awsg® 

CfffttT-7>li-oT^oTJ:< % 1 d hm&cvm 

m&mmxm— <r> 1 D^vNTt>«tv\ 

[0 0 5 6] */c. ^3E-T5 I Dli, iift^eco^^ 
*s»*LT^J:V^L, ilft^@l-3rtOgL^:{cJ:oT 

[0 0 5 7] Bf-^i-r-^Tab (0 3) <7>«|/£ 

$rE3 5 ^^-f 0 

[0 0 5 8] Bf-^i^-^/WTabU, «jft<OPf-IHiKab 

[0059] mmmm 1 -T?o^^ ! s^Jil^ov^-r m 3 
[0 0 6 0] cpui o#»**®j:J:o-c«H9- 

«tx-^Tab<b I D-5cO|S;^$:ffV> Ur^Sl 
01) , Pf-^ix— ^Tab*»fe I D = 5tC*9^i-<5fi£ 
ftKz Sr»Ki-S (^^^^S 10 2). 

[0 0 6 1 ] Zfcl^ CPUlOli, ^fl^7 * Srif a 
i-^b (.X^r^S 10 3), «F#a««T M»r<5 

Ufy^S 1 0 4) o -t Its CPU10I1 iiffS 

^4i-^ftb Uf^sios) > 

[0 0 6 2] ^O^f, ^t^^V^^i 0 0^H^ 
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[oo63] tut. cpuioit mm* v> 9 & 1 0 

l 07) o CPUl OIL UrUM D=8£SL$cte:J;o 
Tj1#L {Xy'yZfS 10 8), %z<D I D=8£Pf-f§-$l 
Kx TMJf-^fcLfc^—^Kx [ I D=8] SrlD^I^ 
^>'KHC{C'H-JlraUXilft^@2 5B(C^y h!7 — ^ 4(£ 
ttl,Xmm*t% i^y^S 1 0 9) o 

[0 0 6 4] LT> *^y:/S 1 0 2 CD&SKUi 9 > 
fft^H^— y/VTab^e I D = 8 «cm-r^Pf^iKu 

[0 0 6 5] ffl«*iB2T»«>«ia^Jfl|^oV^TH 
3 H2 5 7 ^^-Cift^-fSp 

[0 0 6 6] cpuio«^l:J:oTStt 

1) , Pf-^l^— ://UTab^<b I D=5UHS^-r<50f-J§- 
&Kz SriSiR-TS (^^y^S 2 0 2) e 

[0 0 6 7]^:, fflte««ia»bS«U^4ry h£ 
3SB>'^77 9al:tm, CPU10«f«lK 
z Sr/B^T^I"* CX^S^S 2 0 3) 0 C PU 1 0 

SUf* (^f^/S 20 4), 
[0 0 6 8] ^tt, tt^y I DfI^-7>KH 
CTfclMfr&WU CPUl 0 Mci«JSLfc£ 

-tfttf) £r?T^ UT5/^S 2 0 5) % ^7^^820 

3 3-Cfc5i^ CPU 1 Otttt/*4ry ha^SCSEStu 
fcl D=8£J&9fcb*r (^fy^S 2 0 6) 0 
[00 6 9] ^rUT, ^^^^S 2 0 2(0*Q;3®t-M!5, 
fff-JH^— ^Tabtf) I D=8(C^i--5Pf#liKu & 

[0070] £i±.<D£ ? \c i^xmrnrnm i t>*h i d^m 
W2mxn, Bt^Kz ^m^\ mmmm2x i d^m 

[0071] ^o-ciim^ets#ii, ^ta^-ft^t 

uriim^® i £ iitt 2 f^n^&f-^^-^u 

Tab£ I D=5^f5fclt^ & £ figflbtttCflfeft* 
[0 0 7 2] *HJ6<D^®"CI1, i£ff#*:^0 



SM&T ? ± * XZ ft ir^MWcAm- -5 r £ #3* u 
[0073] ::t, ii^Bt^^/WK-rofcfe^fL 

[0074] *mfa<ommi\z&^xn, ^ 

[0 0 7 5] «T5*UfcJ:5lclB=#dS«^ 

[0076] r^j;?^ nt*^:3fts«PRsn5<z>ttrr< 

So 

[0 0 7 7] mtii<Offl&2) 118, i9ij;, *$S9!<£> 

igji iHt. ^§m<omm<omm2\z^^>^9m^<o^ 
[0 0 78] *mm<D&m 2 icjsivcrt:, ttrse ufcis 

So 

[0079] ^r. -tix^jxoiiftaie 1 — 3 tcBt^ii 

[0 0 8 0] fto^ iBflBHftllCMU ilft^©2*5 

J: t^iiff mm. 3 t **L^*t*«i« Srf? 0 v Bf # 

«i$r^i-^^:fe(0^^^|iMKab, MKac^/^v^ 
giHKab, HKacSr^i--5o 

[0081] mmmw:2\a* s mmmmit^ 

^iS 1 O-e^ ^SiMKab t iiffigff 2 CD^^ ^ftMKab 
*5 J: ^ilff^S 1 y >^mH Kab ^ ilft^g 2 (D^ 

[0082] mmz, mmmms^h, mmmmntm 

MKact^yv' J LfiiHKac$rtS:^S e ^43, iiff^g 

vmmmw i 3, iy^mu Kac t iim^s 3 <o^ > 
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[ o o 8 3 j *ti*ti<Dmmmw i ~~ 3 -m. 

MK^/^y ^a^HK^bBf ^"fb^K^HK (MK) £ 
iIffK@l *ii*»«2ra^tf#ifi«&fT5 

HKab (MKab) IffSIl £iiff 

KR2IB-CWU &Bf-if«HKKab (MKab) «rfflV>TBf 

[0 0 8 4] tt^Mifrfe3E-r6^M«rB9«rA 

[0085] a«*«iic*5v^T^yi/aiisrac 

[00 8 6] lMtl0^y*/ a i#Aye/aiH 

K' abfc8E3E$jH**, iifI3£Rl-Cf*, HHHk«K« 

HK' ab (MKab) dS^J*$*tS 0 RWlC* iiff§£® 1 

^>b-HHc{c£oTmmmm2\£mm-rz 0 z<o^y 

^«jEIavyKHHC«:g«tfcIttKi2W;, & 

^y^aWIavyKHHC^b/Ny^aiHK' ab 
K' ab (MKab) *£jfcrZ> 0 

[0087] &» % mmmti tmmmm2m^m^m 

HK' ab (MKab) Srffil^T#*ii«*Stf toixS. * 

[0 0 8 8] KHHC«:HP 
#R*LV\ $ib«C, 

fi-TMBl— Ct>«fcv\ -t^, RJ— <0^;**@£fctt:l^ 

[0 0 8 9] wc % iift&R i -eo^ai^wcov^TH 

8, H9*5J:t5Bll 0lc^f-flyS:7n — fcJfii^TRW*- 

So 

[0 0 9 0] tf, CPU10«»iot^ 

oi) x mm*-c-?£-e*\£±y h-rs (^fy/s3 

0 2) . ft*>\ ttiS«^-f^tt, »J***fcTe»iftfc: 

[0 0 9 1] *LT\ CPU 1 0 tt-v y*>=. 
irC/^^LfclftA ( = HKab (MKab) ) £rRf-)Hi 
KfcRJfeMTi* Ut^S 30 3) , Bff-J§-ififi«:§l1*& 
-T* (*^y^S 3 04) o 

[0092] mmmm 2 3, h zmimK-evg 

5) o 3Mf*'r-e*K*&* Ur^S3 0 



6) % .2S«^^^*S5»«:«^.TV^36^^*iJ3fe«:tf 
5 Wy^S 3 0 7) 0 

[0093] rrr% Ka£flr^^^sft«5»«rto»*ic 

[0 0 9 4] -2f, »aHt^^^j65 5»*a^.-CV^fc» 
^JdWt, rt$lS<D^§L^lC < t^9ffb^^!y■^^«iHK , ab?: 
4*1 (^fy^S3 0 8) , IfU^y^atHK' 
ab«rl»#«K-ei»-^fkbr. Wffblfcf-^^^y 

hy — ^4^LTaS««rtTV^ (^f^S 3 0 9) , 
^fyT'S 3 0 2l:lot^f|^^ T ^n|:t7 

[0 0 9 5] -to** T^^flMKabSrJrtVVNy^a 
«HK' ab-C^y^3.Lfc»* (=HK' ab (MKa 

b) ) 4r«fuv^-wiK^RS-r5. gut, mm^^^r 

5 A £ * -C*f L V >P£-iH&K £r#3 v ^TiHf §£® 

[0 0 9 6] ii^t^©2TC^toS^l^(i^cov^TIg! 
8, H9«6WCH1 l*rJBt*-Ctt0rt-*. 

[009 7] £i\ CPU10«^lCj;oT^ 
^«tMKabir^y->=L«iHKab<OR3tSrfT5 yzf 
S 4 0 1) 0 ^Lt, CPU 1 0^^^«*^yi/a 
«T?^y->aLfc»* (=HKab (MKab) ) ^rBf-^B 
KldRfi-r-5 U7 7^S4 0 2) o 

[0098] a««Ri^e>3aHi**tfc^y h«r** 

7 9a|:f^ CPU10^Bff«|KT«W5 
Ufy7'S40 3) o CPUlO^^f tfc^y 

b a*^ y i^mex avyKHHctfcs ansa** 

i"<5 (^fy/S 4 0 4) 0 
[0 0 9 9] Lt, CPU 1 Ota, ^y>a|ia53E=a 

W Mr** Ur^S40 5) , ^ry/S4 0 3<O 

[0 10 0] — tt'^y S/3.«3C3E3^v 
KHHCCfc^ CPUlOWtB/^yh^M 
^Hfc^S^&HK' ab&JROffii- (7fy^S4 0 
6) o ^Lt, ^ryyS4 0 2^IiCM^ 
&MKab£_kf2$l!9 WlfclfUv>y ^ajgHK' ab"C 
( = H K' ab (MKab) ) SrtfU^I* 
•SteKtLTRJTra. *Wfctt^y 

K«rg«f**"CBf #«KSrfflv^Tii««« l 

[0101] £JUbDJ; 9lcuriiAKCi^&^yi/» 

&a«3m2H-Cf*. 9t#«iK ( = HKab (MKab) ) 
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&m\<\ M^i 2 -C/n y 13 v y KHH c ^ 
mK (=HK' ab (MKab) ) £^T&f -i§-ig{f £r?T ? 

[0102] UJiot, 
MKabt^yi/aliHKabSrastSi-'SW-e, ^»6«JtC 
[0 10 3] **s, *Xlk0»S2K:*ivvcr*. i£ff* 

^HKabfi, fifW7^t^W4KI*i:«)» 
«HKaba#*3SiJ©l«^TI»*^LT««FLr*5< w 
[0 10 4] *H«6«>»«2"Ct>, HF-MHr£)H 

[0 10 5] (&lk0#tt3) HI 2, 
/K His, ai6tt, **W©*«W^«3K:J:3tf 

[0106] ^mkovits'cn. tweutBi, H2 
tn cisxTj*m&\zisv2>*:ih?ti<Dmmmm 1-3 

[0107] *tL?*L<Dmmmm: 1 - 3 \at, w\—<o*& 

^MTIt «&Oltf-fHi (MK [ID] ) t**L\- 

[0108] mmm^mm^no^<om^mKn. m 

KORtMlMK [ID] ^y^iHK^y^L 
fcK = HK (MK [ID] ) lCj:l3^-r$o w^T, 

haimi i:iifi^ii2fflTOBip^ii{f<Dfc«)w«F-^i 
iDi/>ys/aiM«iiiti tmm 

mW2\£ x Ztl^tll D=6, HKabt88!Si-S^5i« 
Ml <bilfi^®2-Cli^n^nff&^«K = HKab (M 

K [6] ) Sr^-TSo 

[0 10 9] *rLT, KHF-MlK«rAv^rit«iiA«:fT 

9o piwcaAKsi kmmmmsMxom^mm&tt 

@1 ^ilft^e2lC^n^m D=8, HKac^-r^i: 
ac (MK [8] ) Sr^-T-So *trK«Pf«K«:lv^ 
[0 110] fcil^K@2ra<0BSr#«$: 



[0 111] ilft^gl^I D<>r^5/i/^«i$r^ 

JVetLl D=5 k^yi/^mHK' ab^jE-TSo >iff 
0f-*«K = HK' ab (MK [5] ) 

[0112] fringe. BfilBJtittKXSiifc I 
D=5i:/Nyv/a«lHK' ab£:ft2EX=> a ?'>' KKHCfc 
<toT3im^®2iCifi^i"5o MI^^KKHC 
£gff Lfcii{&3£@2i2. MI^yKKHCA^ 
ID=5^r>aiHK' ab£Bt9fflU Bf^tK = 
HK' ab (MK [5] ) ^Mf5 0 ifift^S 1 ti&m 

[0 113] fff-^t^^^^-^Mi, Ift^t 

[0 114] lif-JH^**^— /;i/MT©«*«: 

H 1 4 ic^-To 

[0115] m-^m-^^^'r—^^MTn, 
[oii6] m-e, mmmwmot&m^mfc'o^x 
[oii7] *-f ; c pu i o^Mtiaot^ 

Kjei-a O^y^S 5 0 1) o RUl, CPU10H, 

utttv^^f-^MT^e) i d= 6tcfli^rspt-^ 

«HKab-e^y^3.Ufc3!6* ( = HKab (Kw ) ) 

Bltei"* (^fy^S 5 0 3) 0 
[0 118] ^rbT, CPU 1 Ott, ii«£«23S0>»* 
h£*^KtWHfcLT*y h!7-^4 (Ell) 

(c^ftux (^f5//s 50 4) % wmxxx*&ib 

Zti^frWim&ftS (^7y7S 5 0 5), 

[0119] M*-iHttXK*&tt* fif^ 

? Wis? b£tliZZk\££oXlftim&&W7&&hZ> 

kvm-rz. 

[0120] m^s vmmtmitmn&'m.Eik&mfi, 
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tiX^ttfWWXfiXT- y^S 5 0 4gd&31JcM?K 31 
[0121] *3ffi#^M«OA^^a*ci:ori» 

*U 3&r L<S^£;ft,fc I D= 5 i^y^alHK' ab£ 

^y^S 5 0 6) c 
10122] CPU10I1 ra^UfID=5 

3E^^VKKHC{C^DUTiim^©2 55ic:^^ h T7 — 
*4te*tUCi£fr*-5 (^7^5 5 0 7) . 
[0 12 3] ^"fyys 5 0 2<D&»;:M9, Pf#«t^ 
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